$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: RsnXb1VRXyVpA5jGjxNeZdNCBJomevuKuoPXZlutGRg= Subject key identifier: 05:7C:85:A6:78:B8:CC:4A:17:49:44:2B:C0:47:1E:3E:0E:CD:B7:BA Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0D44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0D39 Signing time: Wed 26 Aug 2026 18:05:45 +0000 Manifest this update: Wed 26 Aug 2026 18:05:45 +0000 Manifest next update: Wed 02 Sep 2026 18:05:45 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: mp7wHYEmTUVD9pVmeUgzgJfzQxd+W/WOThb6bn+kijE=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: h96ygBqP1HseQXwwUH62n5eNi2bKC3tu8QpUrxfOlvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 18:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Aug 26 18:05:45 2026 GMT Not After : Sep 2 18:05:45 2026 GMT Subject: CN=6a8f2af9-53db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:23:aa:c3:3b:70:d5:be:5f:56:02:7a:bc: 86:0e:c4:bf:74:63:10:6f:70:ab:12:3c:a1:bf:58: fc:49:57:df:8e:de:b0:4e:ba:37:44:1d:b7:f8:5a: ee:ca:94:c7:c9:0d:95:b0:24:f0:9a:bf:38:af:f9: f7:fb:71:3c:f9:b2:d3:d4:2e:18:85:2e:d5:2d:94: 93:30:da:8b:c1:84:b4:5e:ed:c6:92:3c:d3:df:99: ab:89:d8:e4:a6:b0:3e:12:6f:b9:0e:75:ca:a1:ae: 25:95:c6:f3:25:5f:c5:1d:61:2a:1f:e5:d2:e4:99: c0:04:40:fe:4c:de:8f:48:48:77:db:81:8b:4e:59: ec:c1:54:82:15:d8:13:7d:f0:af:5c:ec:50:cb:57: 6c:58:ea:ac:09:38:86:b2:87:69:a4:b3:52:3f:e4: 1e:83:4a:8f:db:1d:11:1b:1d:c9:49:41:6a:71:74: 77:b2:61:f5:79:ec:c5:ef:1f:91:f7:cd:a7:29:23: be:2c:fa:0e:e3:15:06:41:1e:0d:86:96:06:20:d0: 2f:e9:af:8c:72:68:31:4f:a1:07:db:e9:ee:8d:f7: 8c:15:5f:59:1b:fa:c9:0c:8b:df:7d:5a:9e:4f:48: d7:11:3e:c4:83:c1:25:8b:65:8d:96:5c:d7:90:d1: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7C:85:A6:78:B8:CC:4A:17:49:44:2B:C0:47:1E:3E:0E:CD:B7:BA X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f7:3a:36:49:e5:89:b2:2a:f9:84:a5:59:06:68:ad:fa:1d: 17:b0:e1:c1:3c:b8:bb:aa:97:7d:e6:5e:ca:e0:75:ad:9d:3a: 6c:ef:c9:9c:06:69:6d:c3:0c:2c:22:f9:43:0a:48:15:4a:07: 11:67:88:c5:39:21:f2:fa:90:07:66:12:87:16:90:6a:2c:cb: 43:12:6c:24:b1:db:5a:19:1a:e4:79:a3:f2:88:57:df:81:8a: 41:e6:57:76:6a:23:91:85:87:3c:f9:f9:e7:18:0b:96:a9:cd: 13:d5:c9:b5:f0:f7:f6:65:0b:6f:de:e7:2d:66:55:52:26:df: b2:bd:3d:4a:33:81:15:d8:59:9d:79:a1:4e:c9:2e:f1:b4:b8: c9:b4:90:e1:40:c2:ca:0d:d1:74:4a:1f:39:e9:52:30:43:90: fa:0f:e9:e2:8c:f6:2a:e8:5f:7f:f3:34:f1:e2:37:03:d1:82: d8:28:bd:88:ae:80:08:49:bd:1a:c7:0e:67:41:15:81:f1:57: 39:0a:d5:76:fa:be:69:0d:03:9d:fb:44:b9:1a:b6:15:1d:ca: b9:e4:c6:aa:cf:33:83:a5:fd:80:8c:44:34:2b:9e:96:1d:00: 06:73:be:4c:58:31:68:28:77:4f:67:b9:a1:89:be:45:46:0b: e6:7e:b2:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjYwODI2MTgwNTQ1WhcNMjYwOTAyMTgwNTQ1WjAYMRYwFAYD VQQDEw02YThmMmFmOS01M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs00jqsM7cNW+X1YCeryGDsS/dGMQb3CrEjyhv1j8SVffjt6wTro3RB23+Fru ypTHyQ2VsCTwmr84r/n3+3E8+bLT1C4YhS7VLZSTMNqLwYS0Xu3GkjzT35mridjk prA+Em+5DnXKoa4llcbzJV/FHWEqH+XS5JnABED+TN6PSEh324GLTlnswVSCFdgT ffCvXOxQy1dsWOqsCTiGsodppLNSP+Qeg0qP2x0RGx3JSUFqcXR3smH1eezF7x+R 982nKSO+LPoO4xUGQR4NhpYGINAv6a+McmgxT6EH2+nujfeMFV9ZG/rJDIvffVqe T0jXET7Eg8Eli2WNllzXkNGK5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAV8haZ4 uMxKF0lEK8BHHj4Ozbe6MB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJPc6NknlibIq+YSlWQZorfodF7DhwTy4u6qXfeZeyuB1rZ06bO/JnAZpbcMM LCL5QwpIFUoHEWeIxTkh8vqQB2YShxaQaizLQxJsJLHbWhka5Hmj8ohX34GKQeZX dmojkYWHPPn55xgLlqnNE9XJtfD39mULb97nLWZVUibfsr09SjOBFdhZnXmhTsku 8bS4ybSQ4UDCyg3RdEofOelSMEOQ+g/p4oz2Kuhff/M08eI3A9GC2Ci9iK6ACEm9 GscOZ0EVgfFXOQrVdvq+aQ0DnftEuRq2FR3KueTGqs8zg6X9gIxENCuelh0ABnO+ TFgxaCh3T2e5oYm+RUYL5n6yww== -----END CERTIFICATE-----Generated at Thu Aug 27 08:06:27 2026 by rpki-client